Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: tgakdq3DAiqWjgcOt02jnPfqCIkYchvV8OOHzsmuRfs=
Subject key identifier: 8E:8A:81:F9:59:48:90:9B:CF:F3:16:83:55:E2:DC:C7:82:51:2B:EE
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019CC89A0AAAB6AC2E6ABB349F4671CA2E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1859
Signing time: Sat 07 Mar 2026 14:01:04 +0000
Manifest this update: Sat 07 Mar 2026 14:01:04 +0000
Manifest next update: Sun 08 Mar 2026 14:01:04 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: Lw2frXCoefVFqrvTpgThSPfs+AXE4VtcnqPgLt6UD3o=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:9a:0a:aa:b6:ac:2e:6a:bb:34:9f:46:71:ca:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Mar 7 14:01:04 2026 GMT
Not After : Mar 8 14:01:04 2026 GMT
Subject: CN=8e8a81f95948909bcff3168355e2dcc782512bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:6e:99:7b:fa:d5:07:1e:f1:af:75:36:5d:
60:f5:c9:e6:3f:89:09:5f:95:d5:c6:10:c8:b8:5e:
3d:fd:f9:81:15:54:06:04:8b:e6:4c:9f:63:71:a4:
3a:c9:7c:10:77:17:7a:67:e5:7b:aa:db:bf:87:fc:
15:f8:07:b2:45:68:61:73:3e:4e:bf:3b:f3:5e:d2:
71:85:37:96:53:56:d5:00:1f:54:a5:47:df:96:46:
8e:ca:d4:5f:4d:7a:1a:06:ff:72:c7:29:0e:c7:b4:
bd:91:74:ce:1b:9a:7e:da:d3:04:67:16:39:f4:69:
08:41:6c:a0:5c:2f:5a:92:62:54:a2:b6:ab:ce:7b:
f1:18:20:57:40:65:ed:64:53:b7:d2:71:4c:aa:ba:
bf:a9:78:87:e9:43:be:59:0f:2c:8c:10:f4:b6:2f:
12:75:3b:ce:8a:59:df:25:e8:ea:77:9d:15:08:22:
59:7c:33:8d:f1:3c:ed:fc:c9:fb:ad:78:df:ec:b6:
f6:e5:78:3d:47:7c:4a:d5:ff:fb:33:3f:a0:20:47:
a5:bf:67:4c:3d:90:8d:39:c7:d3:8b:6c:2b:31:be:
f5:b3:2f:7b:79:e1:1c:11:e4:09:d2:36:20:3a:80:
90:f7:ac:9f:4c:6a:48:62:5b:9b:f5:cf:79:7c:dd:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:81:F9:59:48:90:9B:CF:F3:16:83:55:E2:DC:C7:82:51:2B:EE
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:46:cf:8d:9e:e0:b5:0f:34:a0:85:2a:4f:52:c7:c2:a3:
d2:ea:ad:ed:78:c1:45:5e:51:c4:65:cf:0a:78:05:af:a8:05:
d8:61:ce:1b:a8:7d:61:7c:20:6f:e0:85:ba:44:03:a4:05:d5:
da:c8:55:ed:a4:e8:1d:cd:a2:68:d6:fa:b0:65:b6:e8:9a:49:
f0:a1:f5:ca:88:68:94:2a:46:84:4a:0e:b1:0a:53:7e:10:6c:
18:57:4b:f3:87:c6:08:ff:63:1d:db:b3:e2:9b:32:15:dc:b6:
6a:e4:b3:5d:60:fb:cf:1c:0f:51:45:b5:03:a1:16:13:73:3f:
cc:9a:f6:d5:b5:71:6a:a4:39:8e:c1:f5:3f:52:1d:80:50:73:
2f:02:54:27:65:75:be:1a:53:f6:60:a9:d2:9d:07:06:31:13:
4e:12:76:cd:40:be:da:35:70:78:36:8f:8d:d5:aa:df:e0:77:
56:da:e4:58:9d:a2:39:7f:06:b1:b2:92:5f:39:b6:23:08:9b:
a0:6d:81:06:e5:52:fa:5c:83:db:d8:d9:10:20:39:2b:0e:cc:
1d:34:c8:16:5a:56:b3:2b:55:9b:3f:1e:8e:1c:2a:a9:f5:1c:
f1:ec:27:59:29:f5:bc:93:16:2d:f2:9a:b0:62:f6:57:09:e4:
7e:28:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:05:11 2026 by rpki-client